You need to create an API key for the whole Confluent Cloud, not for a specific cluster. See an example in the docs here